Roll up codex/issue-644-external-case-mapping into dev

[YueZh127]

Summary

Rolls 2 commits from codex/issue-644-external-case-mapping into dev for ChronoAIProject/fkst-packages-testing, through immutable integration head c88198d1a9aaaf559f6fe3bd76804cdf3a55cdcb.

• Maps accepted external proposed CLI and HTTP cases into the canonical case catalog and structured execution plan instead of silently omitting them.
• Carries immutable external-case mapping refs and SHA-256 bindings through authorization, planning, execution results, terminal summaries, publication, and aggregate traceability.
• Emits stable per-case traceability from the proposed-case identity through catalog/plan/result/evidence and final aggregate status.
• Fails closed when an accepted case has no authorized Host execution mapping, when a mapping is malformed or unsupported, or when the mapping differs from the catalog.
• Blocks execution when unresolved external-case residual risk remains, avoiding a successful aggregate result with silently dropped cases.
• Adds end-to-end coverage for non-built-in CLI and HTTP cases, rejection traceability, malformed mappings, mapping/catalog mismatch, and deterministic replay.
• Includes the implementation for issue P1: Map external proposed cases into catalog, plan, and results #644 and its merge through PR github-devloop implementation for #644 #653.

Commits

• f1ac37e6c0a6cde69c368571b92c28db1a2f06e3 - implement external proposed-case mapping and traceability for P1: Map external proposed cases into catalog, plan, and results #644
• c88198d1a9aaaf559f6fe3bd76804cdf3a55cdcb - merge PR github-devloop implementation for #644 #653 into the integration branch

Verification

• The implementation commit currently has no GitHub check runs or commit status contexts.
• This rollup is intentionally left open for the repository's normal dev review and required-check flow.
• No auto-merge is enabled.

中文摘要

• 将已接受的外部 CLI/HTTP proposed case 映射到标准 case catalog、structured plan、case results、aggregate report 和 traceability 输出，不再静默丢弃。
• 使用固定引用和 SHA-256 摘要贯穿授权、规划、执行、终态及发布边界。
• 对缺少授权映射、畸形或不受支持的映射，以及 mapping/catalog 不一致等情况执行失败关闭。
• 增加外部 CLI/HTTP、拒绝路径、错误映射、跨产物绑定及确定性重放覆盖。
• 汇入分支：codex/issue-644-external-case-mapping -> dev；固定头提交：c88198d1a9aaaf559f6fe3bd76804cdf3a55cdcb。

Refs #644

Manual rollup created because the hosted session's first post-merge rollup scan was interrupted; tracked in ChronoAIProject/fkst-hosted#5991.